Method and apparatus for automated password entry

• US 9,935,928 B2
• Filed: 12/21/2016
• Issued: 04/03/2018
• Est. Priority Date: 03/28/2013
• Status: Active Grant

• Current Assignee: Wendell D. Brown
• Original Assignee: Wendell D. Brown
• Inventors: Brown, Wendell D.
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Zhu, Zhimei
• Application Number:
  US15/387,438
• Publication Number:
  US 20170104738A1
• Time in Patent Office: 468 Days
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and apparatus are provided for protecting security credentials (e.g., username/password combinations) and/or other sensitive data in a “password vault.” A password vault device may be or may be incorporated into a portable (or even wearable) electronic device, such as a smart phone, smart watch, smart glasses, etc. When a security credential is requested during a user'"'"'s operation of the password vault device or some other computing/communication device, such as when the user is accessing an online site or service via a browser program, the request is passed to the password vault, and the appropriate security credential is retrieved, delivered, and entered into the requesting interface.

Claims

1. A method of operating a portable credential vault device, the method comprising:

storing at the credential vault device multiple security credentials of a user and information identifying remote computer systems associated with the security credentials; and

operating a processor of the credential vault device to, without activity by the user;

categorize the multiple security credentials based on input from the user;

receive a request to generate a new password for accessing a first remote computer system;

determine a category of the first remote computer system;

generate the new password;

during operation by the user of an electronic device to access the first remote computer system, receive from the electronic device a request for a first security credential associated with the first remote computer system, wherein the first security credential comprises the new password;

automatically deliver only a first portion of the first security credential to the electronic device in response to the request for the first security credential; and

prior to delivering the first portion of the first security credential, verify that the category of the first remote computer system matches the category of the first security credential;

wherein the user enters a remaining portion of the first security credential at the electronic device.

2. The method of claim 1, wherein the request to generate a new password is received during the user'"'"'s operation of the electronic device.

3. The method of claim 1, wherein the request to generate a new password is received from the electronic device when the user is not operating the electronic device.

4. The method of claim 1, wherein the request to generate a new password is received from the first remote computer system.

5. The method of claim 1, further comprising operating the processor to, prior to automatically delivering the first portion of the first security credential:

alert the user to the request for the first security credential; and

receive from the user input signifying authorization of delivery of the first portion of the first security credential.

6. The method of claim 5, wherein the alert is configured to identify one or more of the first security credential and the first remote computer system.

7. The method of claim 1, further comprising operating the processor to:

temporarily disable delivery of one or more stored security credentials to a requesting device unless the credential vault device is located proximate to the requesting device.

8. The method of claim 1, further comprising operating the processor to:

disable delivery of one or more stored security credentials during a predetermined period of time.

9. The method of claim 1, wherein the electronic device is one of:

a computing device; and

a communication device comprising a processor.

10. A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method of operating a portable credential vault device, the method comprising:

storing at the credential vault device multiple security credentials of a user and information identifying remote computer systems associated with the security credentials; and

operating a processor of the credential vault device to, without activity by the user;

categorize the multiple security credentials based on input from the user;

receive a request to generate a new password for accessing a first remote computer system;

determine a category of the first remote computer system;

generate the new password;

during operation by the user of an electronic device to access the first remote computer system, receive from the electronic device a request for a first security credential associated with the first remote computer system, wherein the first security credential comprises the new password;

automatically deliver only a first portion of the first security credential to the electronic device in response to the request for the first security credential; and

prior to delivering the first portion of the first security credential, verify that the category of the first remote computer system matches the category of the first security credential;

wherein the user enters a remaining portion of the first security credential at the electronic device.

11. The non-transitory computer-readable medium of claim 10, wherein the request to generate a new password is received from the electronic device when the user is not operating the electronic device.

12. The non-transitory computer-readable medium of claim 10, wherein the method further comprises operating the processor of the credential vault device to:

alert the user to the request for the first security credential; and

receive from the user input signifying authorization of delivery of the first portion of the first security credential.

13. The non-transitory computer-readable medium of claim 10, wherein the method further comprises operating the processor of the credential vault device to:

temporarily disable delivery of one or more stored security credentials to a requesting device unless the credential vault device is located proximate to the requesting device.

14. The non-transitory computer-readable medium of claim 10, wherein the method further comprises operating the processor of the credential vault device to:

disable delivery of one or more stored security credentials during a predetermined period of time.

15. A portable credential vault device, comprising:

at least one processor;

one or more communication modules operable to facilitate electronic communication between the credential vault device and at least one external device;

non-transitory storage for storing multiple security credentials of a user and information identifying remote computer systems associated with the security credentials; and

memory storing instructions that, when executed by the at least one processor, cause the credential vault device to, without activity by the user;

categorize the multiple security credentials based on input from the user;

receive a request to generate a new password for accessing a first remote computer system;

determine a category of the first remote computer system;

generate the new password;

during operation by the user of an electronic device to access the first remote computer system, receive from the electronic device a request for a first security credential associated with the first remote computer system, wherein the first security credential comprises the new password;

automatically deliver only a first portion of the first security credential to the electronic device in response to the request for the first security credential; and

prior to delivering the first portion of the first security credential, verify that the category of the first remote computer system matches the category of the first security credential;

wherein the user enters a remaining portion of the first security credential at the electronic device.

16. The credential vault device of claim 15, wherein the request to generate a new password is received during the user'"'"'s operation of the electronic device.

17. The credential vault device of claim 15, wherein the request to generate a new password is received from the electronic device when the user is not operating the electronic device.

18. The credential vault device of claim 15, wherein the request to generate a new password is received from the first remote computer system.

19. The credential vault device of claim 15, wherein the memory further stores instructions that, when executed by the at least one processor, cause the credential vault device to, prior to automatically delivering the first portion of the first security credential:

alert the user to the request for the first security credential; and

receive from the user input signifying authorization of delivery of the first portion of the first security credential.

20. The credential vault device of claim 19, wherein the alert is configured to identify one or more of the first security credential and the first remote computer system.

21. The credential vault device of claim 15, wherein the memory further stores instructions that, when executed by the at least one processor, cause the credential vault device to:

temporarily disable delivery of one or more stored security credentials to a requesting device unless the credential vault device is located proximate to the requesting device.

22. The credential vault device of claim 15, wherein the memory further stores instructions that, when executed by the at least one processor, cause the credential vault device to:

disable delivery of one or more stored security credentials during a predetermined period of time.

23. The credential vault device of claim 15, wherein the credential vault device is wearable.